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We describe a quantum cryptography protocol with up to twenty four-dimensional (D — 4) states 
generated by a polarization-, phase- and time-encoding transmitter. This protocol can be exper- 
imentally realized with existing technology, drawing from time-encoded and polarization-encoded 
systems. The protocol is error tolerant and has a quantum bit-rate of 2 per transmission/detection, 
which when combined with state detection efficiency yields a qubit efficiency of up to 1 or double 
that of BB84-/ifce protocols. 
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We investigate the quantum information implications 
of forming a single-photon superposition of time, phase 
and polarization states. To our knowledge, the mutual 
effects of combining multiple basis states of a single pho- 
ton has has not been fully analyzed, although it can be 
argued that Bennett established polarization, phase and 
time encoding in 1992 [l[ when he showed that quantum 
key distribution (QKD) could be effected through use 
of a pair of Franson's unbalanced Mach-Zchnder (uMZ) 
interferometers [H,|I|- While the encoding techniques em- 
ployed in fiber based BB84 Q require an overlap of the 
temporal and polarization superposition modes to gener- 
ate a random key, typically only one polarization mode 
has been utilized, as required for good interferometric vis- 
ibility This investigation shows that an inclusion of 
extended polarization coding, together with the typical 
fiber QKD elements of phase and time, allows creation 
of multi-state superpositions of single photons that can 
be simply exploited to effect efficient and secure QKD — 
quantum dense coding without entanglement. 

The existence of quantum dense coding systems have 
been discussed in theory [(| 0], but no practical non- 
entangled quantum cryptography (QC) concept with 
Hilbert dimension T> > 2 has been presented or realized. 
By including polarization mode encoding with the stan- 
dard time and phase outputs from fiber based BB84, a 
4-level single-photon superposition is simply created. 

An example of the common fiber based BB84 super- 
position is shown in Fig. [TJ and is physically described 




as 

where i/jq is a temporal and polarization superposition 
of plus-or-minus vertical polarization (±i>) delayed by 
At following horizontal polarization (/i), and where \t) 
identifies the portion of the superposition at time t, and 
\t') = t' = t+At. This type of superposition is commonly 
formed in fiber based BB84 quantum cryptography appli- 
cations @-[ll|, and the ±1 (phase of <j> = or n) preceding 
the v is usually added through phase-modulation (fiber 
based BB84 usually also randomly adds <f> = ir/2 and 
37r/2 to create uncertainty and enable the quantum-key 
exchange). 

The Eq. Q] superpositions can be manipulated to create 
the four fundamental single-photon basis states that can 
be expanded into twenty 4-level states in total, with the 
four primary states presented below: 

IV^) = \h}\t), \4 1) ) = \v)\t), 

\4^) = \hW), \4 l) ) = \v)\t>), (2) 

where we use the bra-ket notation such that (ip^fyj ) = 
(t\(p\q)\t') = (t\6 pq \t') = S pq S w - if cither p ^ q or t ^ 
t' , but SpqStt' = 1 when p = q and t = t , for p € {h,v} 
and q £ {h,v}, as usual. 

The mathematics are simplified with definitions 
\H) = \h)\t), \V) = \v)\t), \H') = \h)\t>), \V) = \v)\t>). 



FIG. 1: Example of a single-photon superposition, a super- 
position in time, polarization and phase. 



These primed and unprimed states in linear combina- 
tions form left-and-right diagonal, or left-and-right circu- 
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lar, states in the primed or unprimed time coordinates: 
D = 
D = 
R = 
L = 
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V2 
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These definitions, together with the techniques for find- 
ing mutually unbiased bases (MUBs) presented in (]~2| — 
Il4| . are used to specify the remaining four V = 4 MUBs 
for this non-entangled single-photon 4-level system: 



(2) 



i^ 2) ) 
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\D) ~ \D') 
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(3)N _ \D)+i\D') , (3 ). _ \D)-i\D') 



l^ 3) > 



\D)-i\D')_^ ( 3) \D)+i\D') 
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\L) - |g) 
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\L) + \R') 
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(6) _ ( 5 ) _ 

(5) \L)-i\L') (5) 

1^3 > = 7s — . m ) = tk — ■ ( 7 ) 



V2 
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These single-photon states form twenty 4-levcl qudits, 
in contrast with 2-level qubits, and it is evident that 
\{^j n \' t Pj'}\ 2 = 8ij f° r an {hj} when m = n, and it is 
easily demonstrated that |(V' l m |' i /'™)| 2 = 1/4 for all 
when m ^ n, proving that the ip™ form five 4-level 
single-photon MUBs. Other non-optimal basis sets can 
be found, but these five bases represent the maximum 
number of 4-level bases that exist when T> is a power of 
a prime [l4j]. 

An experimental realization of these single-photon 
states could be used to form an efficient and secure QC 
protocol if the states can be optimally detected. For ex- 
ample, 4-level QC systems can tolerate error rates on the 
qudits of 0.25/qudit for individual attacks 115 1, a nd error 
rates of 0.1893/qudit for coherent attacks [lq - lla . e.g., as 
demonstrated in [l9| and especially Table 1 in [20j. These 
tolerable qudit error rates are to be compared with the 
maximum allowable error rates for single-photon 2-levcl 



QC systems of 0.1464/qubit for individual attacks and 
0.1100/qubit for coherent attacks (the 0.1100/qubit has 
been shown to be the maximum allowable error rate for 
unconditional qubit security for BB84 [l7l[). 

One technique to prepare the T> = 4 states is mod- 
eled with the Fig. [2] optics. In this approach a h pho- 
ton is transmitted beyond the first polarizing beamsplit- 
ter (PBS) and encounters the first Pockels cell (PC) 
that can be modulated to transmit either a horizontal, 
vertical, or positive diagonal polarized photon (h, v or 
d= (h + u)/\/2) as the input state to the uMZ [2l|. For 
the case that the first PC rotates the h polarization to d, 
the second PBS causes an h and v superposition of the 
single photon to form, where the v position travels the 
upper path and the h position the lower path through 
the uMZ. For the case that the first PC transmits h or 
v, the h polarization will pass directly through the PBS 
to the lower-arm of the uMZ, and the v polarization will 
be reflected by the PBS to the upper-arm of the uMZ. 
For both cases, the lower-arm includes no optics to al- 
ter the state of the photon (or photon position) traveling 
this path, but the upper-arm contains a phase modula- 
tor (PM) that randomly adds a phase delay of <j> = or 
7r to the upper-arm photon (or photon position). The 
uMZ is complete with a third PBS that transmits h and 
reflects v so that for the first case the Eq. Q] state ifio 
is transmitted onto the quantum channel, i.e., the trans- 
mitted state is ±v delayed by At following h, where t and 
t' = t + At are as defined earlier, and At is the time dif- 
ference between the long and short arms of the uMZ [22| , 
but for the second case either h is transmitted at time 
t, or else v is transmitted at time t' . For both cases the 
second PC is modulated to rotate the t or t' polarization 
to h, v, d, d, r, or I (r and I are left and right circu- 
lar polarization: r = (h+ iv)/\/2 and I = (h — iv)/\/2), 
where we suppose that the additional phase of ±i can 
be added as needed at the t' states through quarter-wave 
(Q) modulation of the first PC. 

The Fig. [2] optics, with its degrees of freedom defined 
by the two PCs (symmetry operators), can be used to cre- 
ate any of the twenty ijj™ 1 states. Based on, (1) security 
of 4-level systems to individual (25% to 26.66%) and co- 
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FIG. 2: Optical model with degrees of freedom needed to cre- 
ate 4-level single photons. Optics include a laser source that 
transmits both a bright timing-pulse and single photons onto 
the quantum channel, a polarization controller, three polariz- 
ing beamsplitters (PBSs), a phase modulator (PM), and two 
Pockels cells (PCs). The early position exits the uMZ with 
ft-polarization, and the late position with ±u-polarization. 
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herent attacks (18.93%), (2) the marginal increase in se- 
curity against individual attacks for twenty 4-lcvel states 
versus eight 4-level states (1.66%) relative to the dense- 
coding bit rate efficiencies [p(2-bases) = 1, /?(3-bases) = 
2/3, p(4-bases) = 1/2, p(5-bases) = 2/5], and (3) be- 
cause of the Shannon reconciliation limit based on ini- 
tial error rates, we only consider eight 4-level states in 
two bases: bases ifi™ f° r * 6 {1)2, 3, 4}, and m £ {2,4} 
(Eqs. |4] and [6]). These eight states (tpf, and i/jf) can 
be resolved in point-to-point QKD with interferometric 
techniques and the BLT02-like [23[ optics seen in Fig. [31 
with a protocol detection efficiency of ?y = 1/2 if only two 
of the basis states are used UM ■ 



The efficient detection of the ijj. 



(2 V 4) 



states can be ac- 



complished by modeling the three PCs in Fig. [3] as rota- 
tion operators P[ m ^ , P 2 "^ , and P^ , respectively, where 
the m superscript denotes either the ip 2 or "0 4 basis, and 
by letting the two delay legs Ai and A2 be denoted by 
operators A x and A 2 [25[. In this model the early (p e ) 
and late (pi) positions of the V = 4 states enter the op- 
tical system and encounter the operators in order from 
left to right: P± m \ A u P 2 (m) , A 2 , to the final P 3 M rota- 
tion operator, and then arrive at the PBS that projects 
v polarizations onto detector D v , and h polarizations 
onto detector Dh- With this optical model, resolution of 
these states requires either half- wave operations of P± = 
H( i5 \t) + H(- 45 \t + At) for the p e and pi polarization 
positions (times t and if), or quarter- wave operations of 
p| 4 ' = Q, at both t and t' for the p e and pi polariza- 
tion positions. Except for these operational differences, 
the remaining operator elements to resolve the ip 2 and 
tfjf states are fixed (thus we drop the superscripts), with 
P 2 = P (90) (t+2At)+H( 4 V (t+At)+H<- 90 *> (t) rotation op- 
erations, and P 3 = I(t + At) + H l -' l5 \t + 2At) + T(t + 3At). 

Using the optical models defined by Figs. [2] and El and 
operator notation as described, we find ordered opera- 
tions that allow resolution of the Eqs. S] and |B] states 



0[^ (2) ] = P 3 A 2 P 2 A 1 P 1 (2) , 



P 3 A 2 P 2 A 1 P± 



(4) 



(8) 
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FIG. 3: An optical model that permits discrimination of the 
T> — 4 states presented in Eqs. [2] and [4] to (7) Optics include 
three PCs that modulate the early (p e ) and late (pi) super- 
positions, two time-delay operators composed of four PBSs 
and four Ms that temporally delay v positions relative to h 
positions (Ai = t' - 1 = At and A 2 = 2 At), and a PBS that 
follows the third PC and projects h and v onto Dh and D v . 



The O^ 2 )] and O^ 4 )] operate on the arriving states 
to direct them in a self consistent manner to the appro- 
priate time slots and detectors to resolve their respective 
bases. For example, 

<5ry 2) ]|^i 2) ) 6[v; (4) ]iv>i 4) ) -> |«>|* + 2At) = v" 

=> 4'fAipt i — y D v (t + 2At), 

0[V> (2) ]|4 2) ) <5[^ (4) ]l4 4) ) \h)\t + 2At) =H" 

ipl Aijjj^ D h (t + At), 
0[^}\4 2) ) & d[^]\4 4} )^\v)\t + 3At)^V" 

=S> iplAipj^ D v (t + 3 At), 
6[^ (2) ]|Vi 2) ) 0[^]\4 4} ) -> \h)\t + At) =H' 

=> ^A^i^ D h (t + At), (9) 

confirming the efficient detection scheme. In contrast, 
a measurement any of these eight arriving states in the 
other basis causes random detections in consistent sta- 
tistical distributions at the correct times and detectors. 
This realization is that 



(„V _ a\H>) + V2b\D") + c\V>") 



(10) 



where the single prime coordinate implies detection at 
time t' = t + At, the double prime coordinate implies 
detection at time t" = t + 2At, and the triple prime 
coordinate implies detection at time if" = t + 3At, when 
m =/= n, and where \a\ = \b\ = |c| = 1. From this result it 
is clear that a measurement of any of these eight states 
in the incorrect basis will result in random detections on 
either Dh at time t' , Dh or D v at t", or on D v at time 
t + 3 At, each with equal detection probability 1/4 for 
each detector at each time. 

With these physics models, a quantum dense key ex- 
change can be accomplished. The exchange of a secret 
with the ifi 2 and ip 4 basis sets (eight states, two bases) 
proceeds similarly to BB84. That is, Alice could ran- 
domly prepare single photons in one of the eight ipf or 
ipf states and direct them along the quantum channel to 
Bob who randomly measures the arriving states in one of 
the two bases as they arrive (O["0 2 ] or 0[V> 4 ] operational 
measurement sets) . Bob then publicly announces his ba- 
sis choice and the relative times t of his detections, but 
not the absolute times of his detections that includes t 
and some multiple of At. Alice then publicly announces 
which of his measurements correlated to the transmission 
basis, and Bob discards the half of his measurements 
within the wrong basis to complete the sifting process. 
Alice and Bob then reconcile |2q - [29i ] and privacy amplify 
[27l |30| their key to complete the exchange. 

A proof of unconditional security is beyond the scope 
of this effort [3l|. However, some clarifying observations 
can be made. For example, this 4-level entanglement- 
free concept is to 4-level entangled systems as BB84 is 
to E91. Therefore, any unconditional security proof of 4- 
level entangled systems will apply to this proposition. It 
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is therefore observed that the d-level security proofs for 
individual (25.00% error rate for two 4-lcvcl bases) and 
coherent attacks (18.93%) do apply. It is also noted that 
the coherent limit of 11.00% is the unconditional limit 
calculated for BB84/E91. Thus it is likely that 18.93% 
is the unconditional security limit for 4-level systems, or 
a close approximation. 

It is also noted that these concepts can be implemented 
with true single-photon sources, or with weak coherent 
pulses (WCP). The WCP are easy to create, but have 
been shown to limit range of operation as compared with 
true single photon QC systems. Regarding WCP, this 
system allows monitoring of photon number in the error 
rate as two detectors are used, and detections are ob- 
served on the two detectors at three unique times on the 
Dh and D v detectors. Thus multiple detections on Dh 
or D v at t', t" or £"', or detections on D v at t' , or on Dh 
at <"', give clues about fidelity and possible attacks. It is 
also clear that these concepts can be implemented with 
decoy states [32| which provides a test of the presence of 
certain attacks on the quantum key. 

Like Cerf, et al. [20j . we conclude that a two-bases 
protocol is preferred to a T> + 1 basis protocol because its 
maximum error rate is only slightly lower, and because 
each detection leads to two bits, which when combined 
with the basis choice selection efficiency of r] = 1/2, im- 
plies a rate of 1-bit per transmission with ideal single- 
photon QC in a lossless channel (which of course does 
not exist): the secret key rate is larger than for T> = 2 
BB84, or for multiple bases in T> = 4 QC. Further, the 
amount of key compression in the privacy amplification 
is lower due to the higher tolerance of errors. Cerf, et al., 
also showed that the tolerable error approaches 1/2 when 
T> — > oo, and we have shown in a general way how to in- 
crease the dimension with polarization, phase and time 
encoding of larger and larger plane- wave dimensions. 

We have described a new high-dimensional quantum 
key distribution system that employs the simultaneous 
use of several single photon basis states. These states 
include the polarization states as used in, for exam- 
ple, BB84, combined with time-domain encoding, as 
used with Franson's uMZs, and phase encoding. Exten- 
sion of BB84-like protocols to include an infinitely large 
plane wave basis states allows the generation of high- 
dimensional quantum states that can be realized with 
existing quantum cryptography experimental apparatus. 



APPENDIX 



Other 4-level bases can be found and used to effect a 
quantum key exchange. For example, the Eq. [T] super- 
positions can be manipulated to create three sets of mu- 
tually unbiased 4-level single-photon basis states — twelve 
states in total — through symmetry operations (rotations) 
of the early or late polarizations, as demonstrated in Eqs. 
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lxi 3) > 
Ixf) 



= \D), |xf>=£>>, 
= W), \y ( ? ) ) = D'). 



(12) 



(13) 



It is evident that |(x™|x™ )| 2 = $ij f° r an {hj} when m = 
n, but that |(x™IXj)| 2 = 1/4 for all {i,j} when m 7^ n, 
proving that the xT form three-sets of mutually unbiased 
4-level single-photon basis states for m, n £ {1, 2, 3}. 

To prove that the states in Eqs. QT] to [T3] represent a 
complete set of dimension V = 4, MUBs, we begin by 
identifying one pair of maximally non-orthogonal states. 
For our purposes, we choose the states Ix 1 ) and \x 2 ) of 
Eqs. [H and [12J although any pair can work equally 
well. States x\ an d Xj are a l so quite general and simple 
rotations yield other equivalent superpositions, of which 
a specific example is states \x}) and where \h) — > |r) 
and \v) -> 

In any case, what is sought are other solutions of the 
form 

= Oi\H) + h\V) + Ci \H') + di\V), (14) 

where Oj = Ai ■ e l ' Sai and hi = Bi ■ e l ' ebi , etc., with 
the restriction that |(Aj|Aj)| 2 = 5y. As before, the re- 
quirement on new states |A) are that they are unbiased 
with both \x\) and \xj) T> = 4 states, or specifically 
\{xl\\j)? = 1/4 for all {ij} and |( X 2 |A,)| 2 = 1/4 for all 
{i,j}- The conditions can be applied to yield 



AD cos( 


6 ad) 


= 0, 


AC cos( 


&ac) 


= 0, 


BD cos( 


&bd) 


= 0, 


BC cos( 


bc ) 


= 0, 


where 6 xy = 9 X — 9 y , and also 




AD = BC = 


AC = 


= BD 



0. 



(15) 



(16) 



for any particular |A). (The i's were omitted for clarity.) 
This results in the following: 



cither 
or 



{AB} 
{C,D} 



(17) 
(18) 



and the values for the phase angles {9 a , 6b, 6 C > 6d} can 
be decided as a matter of convenience. Thus, the only 
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possible solution for the Xi are the ones labeled |x 3 ) in 
Eq. [13] (or simple rotations of them) . 

The efficient detection of the xT states proceeds sim- 
ilarly as before. P± = I at both t and t' , but P^ = 
I(t) + H t - 90 \t + At) for the p e and pi polarization po- 
sitions (times t and t'). The remaining operator ele- 
ments to resolve the xj an d X 2 j states are fixed, with 

P 2 (1) <s> P 2 {2) = 77 ( 9 °) (t + 2 At) + 77 ( 45 ) (t + At) + 77 ( 9 °) (t) 
rotation operations, and P^ P^ = lit + At) + 
H^ h \t + 2 At) + T(t + 3At). The X | states are resolved 
when Pp 5 = 77( 45 \ P 2 (3) ee ff( 9 °), and when P 3 (3) ee 7 for 
all times. 

Using the optical models defined by Figs. [2] and [3l 
and operator notation as described, we find ordered op- 
erational sets that allow resolution of the Eqs. [TT1 to fT3l 
states 

6[ X W] ee P^A^A^, 
6[x^] ee PfA.PfA^f), 
6[x (3) ] = Pf^P^AxPf). (19) 

These operators direct the arriving states in a self consis- 
tent manner to the appropriate time slots and detectors 
to resolve their respective bases: 

O^lxi 1 ') = d[x {2) ]\xf ] )^-\h)\t + 2At) 

x[ 1] Axi 2) ^D h (t + 2At), 
6[x (1) ]|x^) = 0[x (2) ]|x^)^k)|i + 2A<) 

=> X { 2 ] Axf ^D v (t + 2At), 
6[x (1) ]|x^) = d[x i2) ]\ X P)^\v)\t + 3At) 
A X f ^ £>„(* + 3 At), 



0[x (1) ]|xi X) ) = 6[x (2) ]lxf)^IM|i + At) 

xi^Axf^^Ct + At), (20) 

and that 

0[x (3) ]lxl 3) ) ^ 77'^xi 3) ^^(t + At), 

5[x (3) ]lxf > V"' x^ » D v (t + 2At), 

0[X (3) ]|X^> =* xf ^ A»(t + 2At), 

5[x (3) ]|xi 3) > V"> ^xi 3) ^D v (t + 3At), (21) 

Measurement of the arriving states in the wrong basis 
causes random detections in consistent statistical distri- 
butions at the correct times and detectors: 

0[x'"']lx.'">. l ° g ' > + ^ D " > + ° |V, " > . (22) 

when m ^ n, and where \a\ = \b\ = |c| = 1. This result 
demonstrates that a measurement of any state in the in- 
correct basis will result in random detections on either 
Dh at time t + At, Dh or D v at t + 2At, or on D v at time 
t + 3At, each with equal detection probability p = 1/4 for 
each detector at each time. It is also clear that none of 
the xT states are included in the ip™ states. Here we find 
only three MUBs, but the maximum number of MUBs 
are the five presented earlier. 
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